It would be out of date extremely quickly considering how fast this project has been moving. Maybe in a couple of years when things slow down but you can see what packages are installed on your system now with the rpm -qa command.
Also:
- Packages from the Base Universal Blue images that Bazzite is built from
- Bazzite layers can be found in this giant file
Bazzite is also built from Fedora Kinoite (for KDE Plasma images which are the default), so here’s the list of packages and the known vulnerabilities for the Fedora 40 base.